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QUESTION 21 

Which action must a Citrix Engineer make to use a Private Root Certificate with the Client for Java 
Version 9.x when securing connections to XenApp resources? 

A. Enable SecureICA . 

B. Install the Java client on each client device. 

C. Turn on theEnableLegacySupport parameter. 

D. Install the root certificate on the firewall, if one exists. 

E. Import the root certificate into the Javakeystore on each client device. 

Answer: E 
QUESTION 22 

Scenario: Nether Tech Inc.'s Research and Development team wishes to upgrade the security 
around its research information. The Citrix Architect recommends the implementation of smart 
card technology at Nether Tech Inc.'s research and development facility in order to implement two- 
factor authentication. 

Which two types of smart cards are compatible with XenDesktop? (Choose two.) 

A. Contact Smart Card 

B. Proximity Smart Card 

C. Common Access Card 

D. USB Smart Card Token 

Answer: CD 
QUESTION 23 

Scenario: Nether Tech Inc. needs to meet the highest security standards to satisfy regulatory 
requirements. 

Secured connections between published desktop and endpoints, as well as published applications 
and the Web Interface need to be implemented. The Citrix Engineer needs to implement the 
XenOesktop, XenApp and the Web Interface infrastructures in Nether Tech Inc.'s environment. 
What are four XenDesktop best practices that should be considered? (Choose four.) 

A. Protect all computers with personal firewalls. 

B. Set up SSL access for the Web Interface site. 

C. Protect all computers with perimeter firewalls, including those at enclave boundaries as appropriate. 

D. Ensure the perimeter firewalls are NOT repositioned when the conventional environment is migrated 
to XenDesktop. 

E. Ensure secure communication between endpoint devices and desktops by using the Citrix ICA client 
and setting the encryption level to basic. 

F. Ensure secure communication between endpoint devices and desktops by using the Citrix ICA client 
and setting the encryption level to 128bit. 

Answer: ABCF 
QUESTION 24 

Scenario: A Citrix Engineer is considering making a change to the design document in order to 
allow the alternate address of the XenApp server to be given to a particular set of client devices 
when users attempt to access published applications. What are three settings that the Citrix 
Engineer must configure in order to use the alternate address of the XenApp servers for the 
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particular set of client devices? (Choose three.) 

A. Enable the spanning tree protocol. 

B. Configure port forwarding on the managed switches. 

C. Configure the firewall for network address translation. 

D. Configure theXenApp Servers with an alternate address. 

E. Specify the MAC address of the client devices that should receive the alternate address. 

F. Specify the IP Address and Subnet Mask for each of the client devices that the users will connect from. 

Answer: CDF 
QUESTION 25 

When completed, Nether Tech Inc.'s environment will consist of XenDesktop and XenApp 
resources. The engineer has configured alternate address translation on the XenApp servers and 
the Web Interface to use alternate address access method. What will happen if the Citrix Engineer 
configures alternate address translation when securing the traffic between the Web Interface and 
the client devices? 

A. The Java client will fail. 

B. Users will NOT be able to accessXenApp streamed applications. 

C. External users will NOT be able to access XenDesktop virtual desktops. 

D. The XML transport will have to be changed to SSL Relay in order to access the desktops. 

E. Internal users will have to connect through theXenApp servers using the alternate address. 

Answer: C 
QUESTION 26 

Scenario: The new design document for Nether Tech Inc.'s environment requires the creation of a 
new desktop group with an HTTPS address type for the XenServer pool master logon page. In 
order to secure communication between the Desktop Delivery Controller and XenServer, the 
design document recommends the engineer replace the default SSL certificate installed with 
XenServer with one from a trusted certificate authority. 

The name of the XenServer host is XS01. Which two commands must the engineer use to 
generate a certificate request on the XenServer host using the XenServer console? (Choose two.) 

A. Opensslgenrsa -out XS01 .private 2048 

B. Opensslgeneratereqsa -out XS01 .private 2048 

C. Opensslreq -new -outform PEM -out XS01 .request -keyform PEM -key XS01 .private -days 365 

D. Openssl request -new -outform PEM -out XS01 .request -keyform PEM -key XS01 .public - 365days 

Answer: AC 
QUESTION 27 

What should the Citrix Engineer enable when configuring server communication between the Web 
Interface and XenApp or XenDesktop in order to allow smart card logon? 

A. SSL/TLS 

B. URL redirect 

C. IMA Encryption 

D. Two-factor authentication 
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Answer: A 
QUESTION 28 

The Citrix Architect should recommend the implementation of a shared storage infrastructure if 
and are required. (Choose the two correct options to complete the sentence.) 

A. XenMotion 

B. disk resizing 

C. centralized storage 

D. virtual machine storage 

Answer: AC 
QUESTION 29 

Which storage type should be used if thin provisioning is required from the XenServer? 

A. NFS based 

B. Fibre Channel 

C. iSCSI software 

D. iSCSI hardware 

Answer: A 
QUESTION 30 

Scenario: During the initial stage of the design phase, Nether Tech Inc.'s management team did 
NOT request the use of remote storage in their environment; however, after attending a recent 
demonstration for XenServer, Nether Tech Inc.'s management team is interested in implementing 
shared remote storage, specifically an implementation that will allow for fast-cloning and 
thin-provisioning. 

Which three remote storage types will meet the needs of this environment? (Choose three.) 

A. NetApp 

B. NFS based 

C. Fibre Channel 

D. iSCSI software 

E. iSCSI hardware 

F. DellEqualLogic 

Answer: ABF 
QUESTION 31 

Scenario: Nether Tech Inc. administrators have requested the ability to fast-clone and thin-clone 
existing virtual machines when necessary in the XenServer implementation. However, there is a 
limited amount of local storage available on the physical hosts; these hosts do NOT have access 
to shared storage. In addition, Nether Tech Inc. administrators plan to have several resource pools 
in the XenServer farm. How should the engineer configure storage in the XenServer environment 
in order for Nether Tech Inc. administrators to manage storage for their applications as requested? 

A. ConfigureiSCSI SR for each host 

B. Utilizestoragelink for Windows NFS services. 
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C. Create a local storage repository (SR) for each host. 

D. Create NFS-shared storage for each resource pool in the farm. 



Answer: D 



QUESTION 32 

Scenario: Nether Tech Inc.'s IT team is going to deploy Provisioning Services to provision a 
Windows 2008 server with two processors and 1 GB RAM running scheduled tasks. The server 
needs to be available at all times with the exceptions of performing updates to the operating 
system. Nether Tech Inc. has five XenServer pools in which this machine can be installed. 
Resource Pools names and remote storage type: 
XSPoolOI - NFS shared storage 

XSPool02 - iSCSI with multipathing enabled shared storage XSPool03 - NFS and iSCSI with 
multipathing enabled to shared storage XSPool04 - NFS and Single port Fiber channel connection 
XSPool05 - NFS and iSCSI without multipathing enabled to shared storage XenServers and 
Resource Pool membership: 

CTXXS01 - XSPoolOI 
CTXXS02 - XSPoolOI 
CTXXS11 - XSPooI02 
CTXXS12 - XSPooI02 
CTXXS21 - XSPooI03 
CTXXS22 - XSPooI03 
CTXXS31 - XSPooI04 
CTXXS32 - XSPooI04 
CTXXS41 - XSPooI05 
CTXXS42 - XSPooI05 

Into which two resource pools can this server be placed in order to allow maximum XenServer 
performance? (Choose two.) 



A. XSPoolOI 

B. XSPool02 

C. XSPool03 

D. XSPool04 

E. XSPool05 

Answer: BC 



QUESTION 33 

As part of their XenServer implementation, Nether Tech Inc. administrators wish to have the ability 
to create new virtual machines using a common base VHD file and to write changes to a 
differencing drive. Which two storage technologies should the Citrix Engineer implement to meet 
these requirements? (Choose two.) 

A. NFS based 

B. Fibre Channel 

C. iSCSI software 

D. iSCSI hardware 

E. Local storage repository 

Answer: AE 
QUESTION 34 
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While reviewing the design document for Nether Tech Inc.'s XenServer implementation, the Citrix 
Engineer noticed that the Citrix Architect recommended two key features for implementation: 
multi- pathing and disaster recovery. 

What are two reasons why shared storage will be required to meet the needs of this environment? 
(Choose two.) 

A. Multi-pathing ensures that specific virtual machines have the appropriate amount of bandwidth 
through the use of assigned NICs. 

B. Multi-pathing allows for multiple paths to the storage, which improves performance and safeguards 
against switch and card failures. 

C. High Availability automatically restarts a running virtual machine from a failingXenServer host to 
another running XenServer host in order to ensure continuity. 

D. Disaster recovery applies snapshots and fast-cloning technologies to the process of initial virtual 
machine placement and real-time movement of virtual machines. 

Answer: BC 
QUESTION 35 

Scenario: Nether Tech Inc. plans to move forward with provisioning XenApp servers using 
Provisioning Services. In addition, Nether Tech Inc. also plans on virtualizing th Provisioning 
Services target devices using XenServer. Engineers must consider several important criteria. The 
environment will need to include XenMotion in the future and maintain fast response times while 
XenApp maintains live, interactive user sessions. Any noticeable degradation of performance for 
the end-user is unacceptable. All virtual machine hard disks will be stored on a robust SAN 
platform. According to best practice, where should the engineer place the write cache? 

A. On the RAM of the target device 

B. On the local storage of the target device 

C. On the local Provisioning Services hard drive 

D. On a shared storage device attached to the Provisioning Services 

Answer: B 
QUESTION 36 

Scenario: Nether Tech Inc. has positioned or implemented several new virtualized servers on 
XenServer and has a mandate to retain historical statistics as well as real-time statistics of the 
XenServer hosts. All virtualized servers are XenApp 5.0 servers. There are several applications 
with large memory footprints that crash frequently. 
What is the best solution to monitor the XenSever hosts? 

A. PerfMon 

B. Edgesight 

C. SMTP Monitoring 

D. XenServer Essentials 

Answer: D 
QUESTION 37 

Scenario: A Citrix Engineer implementing the XenApp infrastructure in the Nether Tech Inc. 
environment is currently training the resident administrator on the necessary steps to monitor the 
environment. The Health Monitoring & Recovery feature will be used to monitor XenApp. Which 
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three services could the engineer monitor using the Health Monitoring & Recovery tests provided 
by Citrix? (Choose three.) 

A. Citrix XTE Server 

B. Terminal Services 

C. Citrix XML Service 

D. Citrix MFCOM Service 

E. Citrix Streaming Service 

F. Citrix Independent Management Architecture Service 
Answer: BCF 

QUESTION 38 

Scenario: The Engineer implementing the new design for Nether Tech Inc. must create a new 
virtual machine and decides to use an existing exported virtual machine to do so. According to the 
specifications in the design document, the Engineer must ensure the MAC address on one of the 
virtual network interfaces associated with the exported virtual machine remains unchanged. The 
following is a list of environment specifications: 
Hostname: CTXXS99 
Password: Pass 123 

Pathname of the export file: XENSETUP.XVA 

VMname: xensetup uuid of Uarget sr: c58dd3ca-lcd7-c933-95a9-32bal864bc7a 
MAC Address: 2a : 8b : b4 : bb : da : 54 

Which command must the administrator use to import the existing exported virtual machine and 
meet the requirements of the scenario? 

A. xevm-import vm= filename= xensetup. xva preserve=true 

B. xevm-import vm= filename= xensetup. xva preserve=2a.8b.b4.bb.da.54 

C. xevm-import filename= xensetup. xvasr-uuid= preserve=2a.8b.b4.bb.da.54 

D. xevm-import filename=xensetup.xva preserve=true sr-uuid=c58dd3ca-1cd7-c933-95a9- 32ba1864bc7a 
Answer: D 

QUESTION 39 

Scenario: Nether Tech Inc. has several new virtualized servers and has a mandate to retain 
historical data on CPU, memory and disk usage of these virtual servers. All of these servers are 
XenApp 5.0 servers. Which two options are the best solutions to fit this need? (Choose two.) 

A. PerfMon 

B. EdgeSight 

C. HPOpenView 

D. XenServer Essentials 

Answer: BD 
QUESTION 40 

The Citrix Engineer implementing the design of the new Nether Tech Inc. environment must 
configure management protocol for monitoring the following: 

NIC failures 

Hard drive failures 

The state of a RAID array 
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Which protocol will meet these needs? 

A. SNMP 

B. System 

C. Hardware 

D. End-to-end 

Answer: A 
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